The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3641-1 advisory.

    Nick Peterson discovered that the Linux kernel did not properly handle debug exceptions following a     MOV/POP to SS instruction. A local attacker could use this to cause a denial of service (system crash).
    This issue only affected the amd64 architecture. (CVE-2018-8897)

    Andy Lutomirski discovered that the KVM subsystem of the Linux kernel did not properly emulate the ICEBP     instruction following a MOV/POP to SS instruction. A local attacker in a KVM virtual machine could use     this to cause a denial of service (guest VM crash) or possibly escalate privileges inside of the virtual     machine. This issue only affected the i386 and amd64 architectures. (CVE-2018-1087)

    Andy Lutomirski discovered that the Linux kernel did not properly perform error handling on virtualized     debug registers. A local attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2018-1000199)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-3641-1)

high Nessus Plugin ID 109650

Version 1.15

Version 1.14

Version 1.14

Version 1.15 Jan 10, 2024, 8:45 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401100845
Version 1.14 Jan 9, 2024, 6:56 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202401091856
Version 1.14 Oct 21, 2023, 9:06 AM CVSSv2 score source (set to "CVE-2018-8897") Detection Plugin metadata Plugin Feed: 202310210906